CVE-2023-47700: IBM Storage Virtualize improper certificate validation

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-02-07 · updated 2026-06-17
Weakness: CWE-295

Description

IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize 8.6 products could allow a remote attacker to spoof a trusted system that would not be correctly validated by the Storwize server. This could lead to a user connecting to a malicious host, believing that it was a trusted system and deceived into accepting spoofed data. IBM X-Force ID: 271016.

Affected products

IBM Storage Virtualize: 8.6

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/271016
https://www.ibm.com/support/pages/node/7114767
https://exchange.xforce.ibmcloud.com/vulnerabilities/271016
https://www.ibm.com/support/pages/node/7114767

Get alerted when CVE-2023-47700 or the next vulnerability affects your stack